How to systematically secure anything: a repository about security engineering

ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

Some of the questions which i was asked when i was giving interviews for Application/Product Security roles. I am sure this is not an exhaustive list but i felt these questions were important to be asked and some were challenging to answer

List of my talks and workshops: security engineering, applied cryptography, secure software development

Some good resources for getting started with application security

A privacy and security engineering toolkit: Discover, understand, pseudonymize, anonymize, encrypt and securely share sensitive and personal data: Privacy and security as code.

Code examples for the AWS Security Blog post: How to use CI/CD to deploy and configure AWS security services with Terraform

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about DevSecOps in Cybersecurity.

Cracking the Security Engineer Interviews

Script to generate a combined PDF for the Security Engineering 3rd edition book from the publicly available chapters under review.

FAANG (MANGA) Security Engineer Interview Collection. An ongoing & curated collection of awesome software, frameworks and libraries, learning tutorials and videos, technical guidelines and best practices, and cheatsheets in the world of Security Engineering Career.

Reference Ontology for Security Engineering (ROSE)

PKI Engineering Repository for Secure Web Application Development

This is my full CV of work.

This repository serves as a comprehensive recap and detailed write-up showcasing the successful completion and in-depth understanding of TCM Security's course: Detection Engineering for Beginners.

StreamAlert is a serverless, realtime data analysis framework which empowers you to ingest, analyze, and alert on data from any environment, using datasources and alerting logic you define.

Security Engineering coursework that delves into the intricacies of vulnerable programs, requiring the adept exploration and exploitation of their weaknesses to execute the "l33t" command and progress through ascending levels of difficulty.

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Security Assurance in Cybersecurity

Web-port-info is a Website Port Information Gathering Tool.